meliohost

Hi!

I’m sysadmin and some of my clients run CJs. Last time some of them complain about strange proxy activity in Proton’s statistics. There are some screenshots of statistic page. They show many clicks without any in. This annoying activity continues for several months.
hxxp://geocities.com/meliohost/p_1.jpg
hxxp://geocities.com/meliohost/p_2.jpg
hxxp://geocities.com/meliohost/p_3.jpg
hxxp://geocities.com/meliohost/p_4.jpg
hxxp://geocities.com/meliohost/p_5.jpg
hxxp://geocities.com/meliohost/p_6.jpg
hxxp://geocities.com/meliohost/p_7.jpg
hxxp://geocities.com/meliohost/p_8.jpg
hxxp://geocities.com/meliohost/p_9.jpg

These proxy connections originating from IP addresses of LayeredTech so it seems that somebody use about 40 dedicated servers to cheat CJs. According to whois most of these servers belong to the one person: Ilya Shevyryayev.
I have sent abuse to LayeredTech (abuse@layeredtech.com) but there is no reaction on it yet. I suppose they don’t think that sending annoying requests to 3rd party servers which cause excessive traffic and server load is serious.

If you have similar problem please write about it to abuse@layeredtech.com and refer my ticket #JYZ-18744-342 and I hope they will take actions against this cheater.

Full list of IP addresses:
216.32.90.90
72.21.55.98
72.232.111.106
72.232.111.114
72.232.111.122
72.232.111.98
72.232.183.226
72.232.184.210
72.232.19.114
72.232.19.122
72.232.19.130
72.232.200.226
72.232.25.106
72.232.25.98
72.232.27.122
72.232.27.162
72.232.29.10
72.232.29.18
72.232.29.2
72.232.29.26
72.232.33.186
72.232.42.178
72.232.55.146
72.232.55.186
72.232.8.226
72.232.9.114
72.232.9.122
72.36.139.218
72.36.154.250
72.36.194.2
72.36.221.186
72.36.228.138
72.36.236.130
72.36.250.154

Some investigation using google shows that these IPs and domains on them are used by cheaters

Regards,
John

Pornonada

not sure if it helps you, but here a list of the domains the cheater uses:

1. 100percent-teens.com [whois] dns: ns1.100percent-teens.com | ns2.100percent-teens.com
2. 6ygalleries.com [whois] dns: ns1.6ygalleries.com | ns2.6ygalleries.com
3. bettergirls.net [whois] dns: ns1.bettergirls.net | ns2.bettergirls.net
4. bestofteens.net [whois] dns: ns1.bestofteens.net | ns2.bestofteens.net
5. bookmarkteen.net [whois] dns: ns0.bookmarkteen.net | ns1.bookmarkteen.net
6. baby-plaza.com [whois] dns: ns0.baby-plaza.com | ns1.baby-plaza.com
7. chickswishes.com [whois] dns: ns1.chickswishes.com | ns2.chickswishes.com
8. cityofgirlz.com [whois] dns: ns0.cityofgirlz.com | ns1.cityofgirlz.com
9. dailygirlz.net [whois] dns: ns0.dailygirlz.net | ns1.dailygirlz.net
10. dirtywishes.net [whois] dns: ns1.dirtywishes.net | ns2.dirtywishes.net
11. exposed-girls.net [whois] dns: ns1.exposed-girls.net | ns2.exposed-girls.net
12. fuckinggalleries.net [whois] dns: ns0.fuckinggalleries.net | ns1.fuckinggalleries.net
13. fordarkdesires.com [whois] dns: ns1.fordarkdesires.com | ns2.fordarkdesires.com
14. fuckingnymphet.com [whois] dns: ns0.fuckingnymphet.com | ns1.fuckingnymphet.com
15. fuckneeded.com [whois] dns: ns1.fuckneeded.com | ns2.fuckneeded.com
16. fuckteenfree.com [whois] dns: ns0.fuckteenfree.com | ns1.fuckteenfree.com
17. girls-galleries.net [whois] dns: ns1.girls-galleries.net | ns2.girls-galleries.net
18. girlsprivate.net [whois] dns: ns0.girlsprivate.net | ns1.girlsprivate.net
19. girls-network.com [whois] dns: ns0.girls-network.com | ns1.girls-network.com
20. horny-dreams.net [whois] dns: ns1.horny-dreams.net | ns2.horny-dreams.net
21. hornyandyoung.net [whois] dns: ns1.hornyandyoung.net | ns2.hornyandyoung.net
22. homieslut.com [whois] dns: ns1.homieslut.com | ns2.homieslut.com
23. hotgirlspussies.com [whois] dns: ns0.hotgirlspussies.com | ns1.hotgirlspussies.com
24. iso-sex.com [whois] dns: ns0.iso-sex.com | ns1.iso-sex.com
25. lovelybitches.net [whois] dns: ns1.lovelybitches.net | ns2.lovelybitches.net
26. myhornygirls.net [whois] dns: ns1.myhornygirls.net | ns2.myhornygirls.net
27. madassteen.com [whois] dns: ns1.madassteen.com | ns2.madassteen.com
28. maidencuties.com [whois] dns: ns1.maidencuties.com | ns2.maidencuties.com
29. needforsex.net [whois] dns: ns1.needforsex.net | ns2.needforsex.net
30. paradise-girls.net [whois] dns: ns0.paradise-girls.net | ns1.paradise-girls.net
31. pinkyholes.net [whois] dns: ns1.pinkyholes.net | ns2.pinkyholes.net
32. pornoteeny.net [whois] dns: ns1.pornoteeny.net | ns2.pornoteeny.net
33. school-whores.net [whois] dns: ns0.school-whores.net | ns1.school-whores.net
34. sexxxygallery.net [whois] dns: ns0.sexxxygallery.net | ns1.sexxxygallery.net
35. stuttyteens.com [whois] dns: ns1.stuttyteens.com | ns2.stuttyteens.com
36. teenshavesex.net [whois] dns: ns0.teenshavesex.net | ns1.teenshavesex.net
37. teenpuppies.net [whois] dns: ns1.teenpuppies.net | ns2.teenpuppies.net
38. teenyparty.net [whois] dns: ns0.teenyparty.net | ns1.teenyparty.net
39. tiny-babes.net [whois] dns: ns1.tiny-babes.net | ns2.tiny-babes.net
40. titssex.net [whois] dns: ns0.titssex.net | ns1.titssex.net
41. teenlocation.com [whois] dns: ns1.teenlocation.com | ns2.teenlocation.com
42. teens-and-sex.com [whois] dns: ns1.teens-and-sex.com | ns2.teens-and-sex.com
43. teenshotnights.com [whois] dns: ns1.teenshotnights.com | ns2.teenshotnights.com
44. try-girls.com [whois] dns: ns0.try-girls.com | ns1.try-girls.com
45. watchmybaby.net [whois] dns: ns1.watchmybaby.net | ns2.watchmybaby.net
46. xxxteenbox.com [whois] dns: ns0.xxxteenbox.com | ns1.xxxteenbox.com
47. young-bitches.net [whois] dns: ns1.young-bitches.net | ns2.young-bitches.net
48. youngwhores.net [whois] dns: ns0.youngwhores.net | ns1.youngwhores.net
49. youngbabez.net [whois] dns: ns1.youngbabez.net | ns2.youngbabez.net

found 25 nameservers on IP: 72.232.215.74 ns1.bestofteens.net 72.232.215.74 (1 domains on this NS)
ns2.bestofteens.net 72.232.215.74 (1 domains on this NS)
ns1.bettergirls.net 72.232.215.74 (1 domains on this NS)
ns2.bettergirls.net 72.232.215.74 (1 domains on this NS)
ns0.bookmarkteen.net 72.232.215.74 (1 domains on this NS)
ns1.bookmarkteen.net 72.232.215.74 (1 domains on this NS)
ns0.dailygirlz.net 72.232.215.74 (1 domains on this NS)
ns1.dailygirlz.net 72.232.215.74 (1 domains on this NS)
ns1.dirtywishes.net 72.232.215.74 (1 domains on this NS)
ns2.dirtywishes.net 72.232.215.74 (1 domains on this NS)
ns1.exposed-girls.net 72.232.215.74 (1 domains on this NS)
ns2.exposed-girls.net 72.232.215.74 (1 domains on this NS)
ns0.fuckinggalleries.net 72.232.215.74 (1 domains on this NS)
ns1.fuckinggalleries.net 72.232.215.74 (1 domains on this NS)
ns1.girls-galleries.net 72.232.215.74 (1 domains on this NS)
ns2.girls-galleries.net 72.232.215.74 (1 domains on this NS)
ns0.girlsprivate.net 72.232.215.74 (1 domains on this NS)
ns1.girlsprivate.net 72.232.215.74 (1 domains on this NS)
ns1.horny-dreams.net 72.232.215.74 (1 domains on this NS)
ns2.horny-dreams.net 72.232.215.74 (1 domains on this NS)
ns1.hornyandyoung.net 72.232.215.74 (1 domains on this NS)
ns2.hornyandyoung.net 72.232.215.74 (1 domains on this NS)
ns1.lovelybitches.net 72.232.215.74 (1 domains on this NS)
ns2.lovelybitches.net 72.232.215.74 (1 domains on this NS)
ns1.myhornygirls.net 72.232.215.74 (1 domains on this NS)

__________________
Biggest NOskim Network open for Trades/Linkexchanges
500+ Text, TGP, MGP and Link Sites for Trade!
All Linkexchanges are autoapproved!
Linkexchanges here - Small Traffic Trades - Thunder-Ball Profil

Pornonada

some more things related to the ip's you have posted (by the way, all in my blacklist for months as well)

found 2 nameservers on IP: 72.232.27.162 ns1.pretty-babes.net 72.232.27.162 (1 domains on this NS)
ns2.pretty-babes.net 72.232.27.162 (1 domains on this NS)

found 2 nameservers on IP: 72.232.25.106 ns1.seducedchicks.com 72.232.25.106 (1 domains on this NS)
ns2.seducedchicks.com 72.232.25.106 (1 domains on this NS)

__________________
Biggest NOskim Network open for Trades/Linkexchanges
500+ Text, TGP, MGP and Link Sites for Trade!
All Linkexchanges are autoapproved!
Linkexchanges here - Small Traffic Trades - Thunder-Ball Profil

Pornonada

found 2 nameservers on IP: 72.232.33.186 ns1.mature-gallery-post.com 72.232.33.186 (1 domains on this NS)
ns2.mature-gallery-post.com 72.232.33.186 (1 domains on this NS)


found 3 nameservers on IP: 72.36.221.186 ns1.venom-hosting.net 72.36.221.186 (4 domains on this NS)
ns1.tefx.net 72.36.221.186 (2 domains on this NS)
ns1.hyper-network.com 72.36.221.186 (1 domains on this NS)


found 4 nameservers on IP: 72.36.236.130 ns0.pharmacy-results.net 72.36.236.130 (1 domains on this NS)
ns1.pharmacy-results.net 72.36.236.130 (1 domains on this NS)
ns1.pizduki.com 72.36.236.130 (1 domains on this NS)
ns2.pizduki.com 72.36.236.130 (1 domains on this NS)

on IP: 72.36.250.154
1. creamedgirls.net [whois] dns: ns1.creamedgirls.net | ns2.creamedgirls.net

__________________
Biggest NOskim Network open for Trades/Linkexchanges
500+ Text, TGP, MGP and Link Sites for Trade!
All Linkexchanges are autoapproved!
Linkexchanges here - Small Traffic Trades - Thunder-Ball Profil

Adult Site Traffic

I want to follow this thread.

A-S-T

__________________
Traffic Sales
Clicked Text Links Available
I have BIG bandwidth, CHEAP! Ask me!
10,000 to 100,000 GB/MO, burstable. - ** We also have bandwidth pricing for Mbps in tiers of 1-10, 11-25, 26-50, 51-100 and 200 & over.

.

meliohost

Hello,

Thanks to those who take an action in this story.
I know that LT started investigation of the situation.
And while we are waitnig for results propse you to send traffic of this mad man back to him for example

RewriteEngine On
RewriteCond %{HTTP_REFERER} girls-network.com
RewriteRule ^.*$ hxtp://girls-network.com

Regards,
John

cones

and he is still at it - this site is great for cheater identification. most cheater domains have a adx thread right on their domain name when you google them haha

guys like this are full time cheats, must suck to be such a fucking arsehole, having to cover your tracks , wonder if you are going to get paid etc etc etc

if any cheater is reading this i hope you get sores on your dick